Developer Integration & Webhook Ingress Guide

A comprehensive, zero-mock developer handbook for connecting test suites (Playwright, Cypress), HR payroll engines (Deel, BambooHR), CI/CD pipelines (GitHub, Sentry), and custom microservices into ThinkNCollab war-rooms.

Provision Connection Key

Each app installed in a room receives a unique conn_... key and HMAC signing secret (whsec_...).

Send JSON via HTTP POST

Push real events from your runner, GitHub Action, or API server to the universal ingress endpoint.

Automatic Sync & Audit Log

ThinkNCollab records delivery logs in MongoDB, updates in-room dashboards, and auto-spawns Kanban tasks on failure.

Universal Webhook Ingress Endpoint

Send all HTTP POST events to the room-specific connection key URL:

POST https://www.thinkncollab.com/api/v1/integrations/webhook/:connectionKey

Required HTTP Headers:

HTTP Request Headers

Content-Type: application/json
X-TNC-Secret: <YOUR_INTEGRATION_SIGNING_SECRET>
User-Agent: ThinkNCollab-Partner-Ingress/2.0

HMAC-SHA256 Signature Verification

For mission-critical production environments, payload authenticity can be verified using HMAC-SHA256 signature verification. Pass the signature in the X-TNC-Signature header:

Node.js Signature Generation Example

const crypto = require('crypto');

function signPayload(rawJsonBody, webhookSigningSecret) {
  return crypto
    .createHmac('sha256', webhookSigningSecret)
    .update(typeof rawJsonBody === 'string' ? rawJsonBody : JSON.stringify(rawJsonBody))
    .digest('hex');
}

Industry Category Payloads & Expected Schema

ThinkNCollab automatically adapts your event payload based on the installed application category:

1. Testing & QA Automation (E2E Suites & Test Runners)

Platform Action: If failedTests > 0, ThinkNCollab automatically creates high-priority Bug tasks on the room's Kanban board with error logs.

{
  "event": "test:run:completed",
  "suiteName": "Checkout & Payments E2E",
  "totalTests": 42,
  "passedTests": 41,
  "failedTests": 1,
  "duration": 12400,
  "failures": [
    { "test": "User checkout coupon code", "error": "AssertionError: Expected $80 but received $100" }
  ]
}

2. People Operations & Payroll (Compensation & Attendance Sync)

Platform Action: Syncs compensation ledgers, leave calendar alerts, and developer onboarding permissions.

{
  "event": "payroll.disbursed",
  "employeeName": "Raman Singh",
  "amountDisbursed": 7500,
  "currency": "USD",
  "action": "Monthly Compensation Disbursed"
}

3. DevOps, CI/CD & Cloud Monitoring (Build Pipelines & Crash Telemetry)

Platform Action: Broadcasts build statuses and triggers instant war-room alerts for P0/P1 production outages.

{
  "event": "incident:alert",
  "service": "Authentication Gateway",
  "status": "CRITICAL",
  "message": "ConnectionPoolTimeout: Database timed out after 5000ms",
  "environment": "production"
}

4. Project Management & Issue Tracking (Kanban Boards & Sprints)

Platform Action: Bi-directionally synchronizes issue state changes, sprint milestones, and Kanban columns.

{
  "event": "jira:issue_updated",
  "issueKey": "ENG-4092",
  "title": "Migrate Ingress Gateway to WebCrypto HMAC-SHA256",
  "status": "In Progress",
  "assignee": "Raman Singh",
  "priority": "High"
}

5. Team Communication & Bots (Chat Feeds & Interactive Slash Commands)

Platform Action: Relays room chat discussions, daily standups, and interactive slash command actions.

{
  "event": "slack:message_posted",
  "channel": "#dev-warroom",
  "author": "Aarav Sharma",
  "message": "Deployment v2.4.0 completed successfully in production.",
  "timestamp": "2026-08-29T03:30:00Z"
}

6. Security, Identity & Vulnerability Audits (CVE & Access Governance)

Platform Action: Flags CVE security warnings and blocks task progression until dependencies are patched.

{
  "event": "snyk:vulnerability_detected",
  "package": "axios",
  "version": "0.21.1",
  "severity": "HIGH",
  "cve": "CVE-2023-45857",
  "remediation": "Upgrade axios to >= 1.6.0"
}

7. Design & Live Documentation (Canvas Embeds & PR Specs)

Platform Action: Embeds interactive canvas prototypes, PR specs, and design documentation directly in rooms.

{
  "event": "figma:file_updated",
  "fileKey": "x9aB123KjL9",
  "fileName": "ThinkNCollab Marketplace UX Mockups",
  "lastEditedBy": "Design Lead",
  "previewUrl": "https://www.figma.com/file/x9aB123KjL9/ThinkNCollab"
}

8. AI & Autonomous Scrum Agents (Backlog Grooming & Code Review)

Platform Action: Generates automated sprint summaries, backlog grooming tasks, and code review suggestions.

{
  "event": "ai.task_generated",
  "title": "Implement Redis Sliding-Window Rate Limiter for Ingress Webhooks",
  "priority": "high",
  "suggestedAssignee": "Backend Lead",
  "estimatedStoryPoints": 5
}

9. Universal Custom Webhooks (Microservice Event Streams)

Platform Action: Accepts arbitrary JSON payloads from custom CLI tools and microservices.

{
  "event": "custom.microservice_event",
  "serviceName": "BillingWorker",
  "data": { "batchId": "b_9918", "processedCount": 1400, "status": "COMPLETED" }
}

HTTP Response Status Codes & Error Handling

Status Code	Meaning	Description & Action Required
200 OK	Ingestion Success	Payload validated, logged in MongoDB WebhookDelivery audit trail, and synced to room.
400 Bad Request	Invalid Payload	JSON body was malformed or missing required event parameters.
401 Unauthorized	Secret Mismatch	Provided `X-TNC-Secret` header did not match integration signing secret.
403 Forbidden	Integration Paused	The integration is currently disabled/paused in this room by the workspace administrator.
404 Not Found	Invalid Key	Connection key does not exist or has been uninstalled.

Interactive Live Webhook Simulator

Test your JSON payload against the ThinkNCollab ingestion engine live from your browser:

Target Category Schema

Event Type Identifier

JSON Request Body

Safe sandbox test simulation

HTTP 200 OK — Ingestion Acknowledged

Multi-Language Code Snippets

cURL

Node.js (Axios)

Python (Requests)

curl -X POST "https://www.thinkncollab.com/api/v1/integrations/webhook/conn_abc123xyz" \
  -H "Content-Type: application/json" \
  -H "X-TNC-Secret: whsec_your_secret_key" \
  -d '{
    "event": "test:run:completed",
    "suiteName": "Checkout Regression",
    "totalTests": 50,
    "passedTests": 50,
    "failedTests": 0
  }'

const axios = require('axios');

async function sendTncEvent() {
  const endpoint = 'https://www.thinkncollab.com/api/v1/integrations/webhook/conn_abc123xyz';
  const payload = {
    event: 'test:run:completed',
    suiteName: 'Production E2E Suite',
    totalTests: 45,
    passedTests: 44,
    failedTests: 1,
    failures: [{ test: 'Stripe Payment Hook', error: 'Timeout after 5000ms' }]
  };

  const response = await axios.post(endpoint, payload, {
    headers: {
      'Content-Type': 'application/json',
      'X-TNC-Secret': 'whsec_your_secret_key'
    }
  });

  console.log('Ingress status:', response.status, response.data);
}

sendTncEvent();

import requests

def push_tnc_metric():
    url = "https://www.thinkncollab.com/api/v1/integrations/webhook/conn_abc123xyz"
    headers = {
        "Content-Type": "application/json",
        "X-TNC-Secret": "whsec_your_secret_key"
    }
    payload = {
        "event": "payroll.disbursed",
        "totalAmount": 48500,
        "currency": "USD",
        "employeeCount": 12
    }
    
    res = requests.post(url, json=payload, headers=headers)
    print(f"Status: {res.status_code}, Response: {res.json()}")

if __name__ == "__main__":
    push_tnc_metric()